I still don't understand why you have to redownload vmware/virtualpc all the time and reinstall it? How often do you do that that it is so bothersome to block it the first time it would come up in your PFW?
The apps inside the vm can be limited from network access just by removing the network adapter inside the vm for instance. Without network adapter there is nothing to talk to. Limiting vmware/virtualpc in addition does not seem necessary here.
I think I still not fully understand what you are up to...
Gerald